ABSTRACT 


A system for detecting an observing program on a computer system is disclosed 
as including accessing instructions tliat access obsen/er data that includes data 
descriptive of the observer program. The system also includes reading instructions that 
read memory of the computer system to obtain memory data. Further, the system 
includes comparing instructions that compare the observer data with memory data read 
in from memory to determine whether the observer program is present on the computer 
system. The system may also include generating instructions that generate results from 
the reading and comparing. The results generated indicate whether the observer 
program is present on the computer system. In addition, the system includes outputting 
instructions that obtain the results and provide the results for a user. 
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